Svchost and nod32 2.7 trial are eating all my resources

Hello ,
I've instaled nod32 2.7 , a trial version , and the windows start-up is quite slow . Also svchost has a mem usage that never drops below 35 000 k . The problem gets worse when I scan the PC or update . I've scanned my PC with nod in depth mode and said that the system was infected , but that type of scan was taking to much time and I've canceled it . With the normal scan , no virus or spyware was detected . I've also scaned the PC with Spyware S&D and several copies of a trojan were found ( I can't remember the name right now ) were found .
Please help me .

Hello ,
I've instaled nod32 2.7 , a trial version ... I've scanned my PC with nod in depth mode and said that the system was infected , but that type of scan was taking to much time and I've canceled it . With the normal scan , no virus or spyware was detected .

Click to expand...

Did you remove the infections ?

The in-depth scan takes longer than the other because they scan deeper and with Advanced-heuristics . Check your settings as per Blackspear's tutorial here .

Boot in Safe Mode http://support.microsoft.com/kb/315222
In Safe Mode , goto Start->Programs->ESET->NOD32
Goto the Profiles tab and make sure you use Control Center Profile
When so , make sure your set NOD32 to scan all your hard drives and push Scan&Clean

NOD32 will automatically take care of everything

Also Scan with Spybot S&D and remove the threats found .
Reboot in Normal Mode.

Thanks for the reply . I will use the instrucions you gave me . The S&D program removed all the spyware .
Nod32 and S&D are up to date .
Do you think that the windows FW is a good one ? If not , what should I use ?
PS : In safe mode , what type of scan should I use ? Normal or Depth ?

Thanks for the reply . I will use the instrucions you gave me . The S&D program removed all the spyware .
Nod32 and S&D are up to date .
Do you think that the windows FW is a good one ? If not , what should I use ?
PS : In safe mode , what type of scan should I use ? Normal or Depth ?

Click to expand...

Windows Firewall is an excellent one . It does what it ha been made for , I use it

Ok .
I've configured my AV as in the tutorial .
i will start my win in safe mode and make a depth scan then tell you the results . Do you think svchost eats resources becouse of a virus or spyware ?
Thanks for the info

Ok .
I've configured my AV as in the tutorial .
i will start my win in safe mode and make a depth scan then tell you the results . Do you think svchost eats resources becouse of a virus or spyware ?
Thanks for the info

Click to expand...

Not sure , make sure you are virus/malware-free and then we'll see .Security should the first to do . Viruses can do everything and until you are sure there are none , I can't say for sure . Might also be what Marcos pointed out

I've done the deep scan and nothing suspicious was discovered . SpyBot S&D didn't detected anything too in safe mode . Ad Aware detected a tracking cookie and a toolbar and removed them . Now svchost has a 25 000 k mem usage almost the same as nod32krn.exe . The startup process ( the part when the wallpaper apears ) is quite slow too .

Wilders is a great place for help! And so... your system is slow. How old is it, and how fast should it be? What is your CPU? How much RAM do you have?. Maybe your system is running as it should. Performance does degrade over time without the proper maintenance. Regarding svchost: it typically runs multiple processes, and the memory usage you're seeing isn't out of line at all!

When was the last time you defragged your HD's? Or.. ran a registery checker / cleaner? or even did a chkdsk on your system?

Wish I could be more helpful. On a good clean well-configured PC, NOD32 usually runs without flaw - light & fast. But... there are many other reasons a PC can exhibit less than optimal performance and they're not necessarily virus or malware related.

I've done the deep scan and nothing suspicious was discovered . SpyBot S&D didn't detected anything too in safe mode . Ad Aware detected a tracking cookie and a toolbar and removed them . Now svchost has a 25 000 k mem usage almost the same as nod32krn.exe . The startup process ( the part when the wallpaper apears ) is quite slow too .

Click to expand...

Boy , we have an improvement . From your first post where you write for 35000k to now 25000k

Your system is now clean . On my computers svchost.exe is ~25000k , too , NOD32 is about 20000 and the system is so fast that you can't even imagine

Have you tried the normal things :
1) Make sure you have no other antivirus in real time
2) What was your previous AV ?
3) Try repairing Winsock
4) Make NOD32 scan not all files by default extensions

My system is an AMD 2200+ (1.8 hz ) DDRam 768 .Should I give more details ?
I've defragmentated my hard drive a few days ago and I've runned some registry cleaning programs a few days ago too .
I've had KIS , KAV and avast but none were efficient .
I am sorry but what is real time antivirus ?
If I repair hat winsock do I have to enter my dial-up details again ? I don't remember that password so I will wait for your reply !
Thanks a lot for all your help .
PS : Bulgaria is really close to Romania

I don't trust there reg cleaners , I have seen some that easily damanged the machine , anyway...

R.m4n said:

I've had KIS , KAV and avast but none were efficient .
I am sorry but what is real time antivirus ?

Click to expand...

You should have only 1 antivirus software installed at the same time . Having more that one will lead to conflicts between the softwares . Real Time antivirus is antivirus having real-time protection , performing on-acess resident scanning

R.m4n said:

If I repair hat winsock do I have to enter my dial-up details again ?

Click to expand...

No , you will not need to . Since IMON works in the early Winsock level , it needs the Winsock in perfect condition . Repair it and see how is it going . Make sure you have uninstalled all previous antivirus software-Kaspersky, Avast , other ...

I've done the repair and the PC is geting better and better . I am not sure about the real time protection : should I disable nod32 AMON or IMON . IMON didn't start after the winsock repair . Should I start it ?
Off topic : do you live near the romanian border ?

I've done the repair and the PC is geting better and better . I am not sure about the real time protection : should I disable nod32 AMON or IMON .

Click to expand...

No , in no way should you disable AMON . AMON is the most important part of NOD32 and if you happen to turn it off , you risk of being infected . What do you mean by the PC is geting better and better ?

It is very good the PC starts quicker . Do you feel the difference , is it faster than it was with other AVs? I don't think your PC is old , there is no such thing , your PC is OK , mine is much worse than yours

Ok .
Another problem now : I have to many network connection icons on the task bar : a hamachi one and a bluetooth one . How can I remove them when they are inactive ? Not hide them : remove them for good . I've seen that meny programs leave folders or files when uninstaled and I think they are occuping my hard disk space .Is there a way to scan my PC for those files ?
Is chdsk safe ? What does it do ?

Well , from there wonderful two letters (o and k) it seems your problem is sorted out

R.m4n said:

Another problem now : I have to many network connection icons on the task bar : a hamachi one and a bluetooth one . How can I remove them when they are inactive ?

Click to expand...

This question may be moved in another thread because it is not related to NOD32 . What do you mean by hamachi one ? Can you make a screenshot and attach the picture with the forum options ? Generally network connections are created or removed from Control Panel -> Network Connetions -> Right click the connection and remove/delete

And what do I do after chkdsk finishes ? How do I check the 2nd drive ?
I don't want to remove the connections , just the icons . When windows loads they take a long time to load . I also have some genius mouse and KB utilities running on startup . Should I disable them ? Hamachi is a virtual network for lan playing .
PS : Thanks a lot , my problem is solved . Balkan aliance )